Capcom breach exposes over 11 million user records

Capcom said on Oct. 22 that a data breach exposed account details for more than 11 million Capcom ID users, widening scrutiny of security controls around gaming accounts.

The company said the exposed data included email addresses, IP addresses and login IDs. It said passwords were not leaked, limiting the immediate risk of direct account takeover from the disclosed data alone.

Capcom ID data exposure

Capcom ID is the account system tied to the company’s games and online services. The breach puts user-identifying information at risk even without password exposure, since email addresses and login IDs can be used in phishing attempts or credential-stuffing campaigns if paired with data from other breaches.

The company did not say in the supplied material when the breach occurred, how long the data was exposed or whether regulators had been notified. Those gaps matter for users, since timing affects whether suspicious login activity can be linked to the incident.

For Capcom, the immediate issue is operational rather than financial unless the company reports service disruption, regulatory findings or remediation costs. For the wider tech sector, the case adds another example of gaming accounts becoming valuable targets as publishers connect identity systems across devices, stores and online communities.

The next check is after Oct. 22: if Capcom issues further notices, users will look for the breach window, affected regions and any required account actions.